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ftm-m-WR- wmomcft 5 *^ a >to io 

5 Igucff ? ttrfWfcB LTsB^ Lfc A P 7n 7 7 
fcf&SU MfefiJffl^gBEjIflU 

fflssv&g&ira* mum* sinothf 
ft©APlCO^T> Bufa-9--exa«#^SA^HuSBA 
P7a77'i';l/W#tT, jgiU 
St^LfcSuEA pyn^r-f^egSHOA P7P7 

A P • sfeff • M£r • 9l»*#ty A P icttt Z 20 
U-^ay^f^l^tcti, mk P <o7uy 7 -C?vt. a 
gB«BAP7P77^;l/£#B8U 

-r;Koi2at^oTtf 9 c t^^t-r^ a p§a • m 

$lfl5AP<0AP7P7W;l'Ati:a, i^lOAP 
*V. Sg2<DAP<D$tgi:/cfcL x-^'xcDT^-bX^S 
3cLTi^5 C cttffBiiSnT*? D , 
M!B^20AP©AP7n77'-l';bB(C«, K^2<DA 
P#. ^2cDAP<D«ltlS/c(i, 7 s -*'\©7*-feX 30 
^fFnJLT^S, $7c{±, $tltLT</>&^<Ii:#fBM£ 
tlTV>!5:V-»#&»C<D^ BulB^l<7)AP^6.tuf2^2 0 
AP'\©1^2©AP<D^$fct±, f-^'xOTi't 
X^fFoJf 5W*3! 1 Eft© A Pga • jSBTjSo 

amy- zxmmmmwtfm&LrcA pyn7r^ 

^H"T 5 A PstfU U 
MEAPsJ?US/*ffl^T, HuiSAP7n77-f;l/£M£r 
-r^ChtioT, Buiemi<OAP^5.HU^2<OAP 
^0D^3S2©AP<D$fi£*fcH\ x-^^T^-tX^J 40 

w&sts. mk pv>m\ • nn ■ sir • B!i»©BEfi5 

*^u~>3 y*%3i-tz>m$M 1 2fBfi<DA 

pn-if^a. 

Mmffirmm&%R t a p 7n 7 r -r;i/*as-r s 

SuIBAPtfU^ffl^T, BuEAP7P7 7^;l/£E£r 

-r^efctCct^T. iui5£i4>APfre>ffii2ij§2<7)AP 

^\©^2cDAP(D^$fc«, x-^^T****! 

sn^^t?, iap ©tela • • MS? • mmmxfi 5 50 
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t^lz-v-aV^lt^i^ 1 *fcf±, 2fB§c<DA 

p<gm-mmi5m a 

MfB^i<OAP©AP7n7r'<';bAtti, MSSiOA 
PA\ Sg2GDAP©6£fjg£fctt, •r-^OT^-trX* 
S*LTV^<lfc^fBa*nTfeD> g$52<DAP©A 
P7D7r-<;l/Btctt, m%2<OkPt)\ W&2<»kP 

Mian 2 <oa p o«##-efcsiuBtf-e*««£SiH 
(c, ^2<DAPcoAP7n7T-r;l/^M - r5fc«6<0 

Mie-9-- ex*«#«ii*nE$ bfc a p 4? u ^mm 

U 

fuIBAPtfyi'fcffl^T, BufB!g2©APcDAP7*P7 
Tl';l/BRtfg^BtDAP7n77''f';l'^ W&2<Dk 
Pt)\ %2<DkP<Dijm%rtiZ. f-i"M07^-lrX5 

HUfBfS 1 <0 A P is* e. MfBS 2 © A P s\(DWti 2 CD A P <D 
mfeZrclt, x-#^©77*X£S^-r£fl3<^2fB 

rnkprnm-mmitto 

t^v-zxmsmmb^M&k pvmmwtwm 

t%tctb<DkP#V ~>*®M U 
MffiAP^Uv'icS^v^T, BufeAP7P7r-i';PtoW 

®wmwft-$-%m$m. 1 *fctt, 2 ek© a p • 

gb*jb7] msmmsmz* ic*-F**«y» 
^>/<»Hfc"rsiji«s 1 7iH6E«oA p^a • mm 

c»*«8] 77v *r-i/3 y*®m*sm%mmm$i 

MiWic77v>r—y3y (WT, APtffi-r) *«(*r 

fx ««BRtf mmmmmm t *wm zvmmmw®* 

AP<DSa-Mffl£*79APWI-31ffl^X 
MISf<Jffl#gB^A P(Dtm • ^ff • Sir • 9JI»©IRK: 

Lfc A P 7"n 7 7 -f*;U*^ L, MIBfiJffl#gBtc 
MSf"Jffl#SB{i. 

m^—^mmmmmni^smk p 7ay 7 

LfctuE A P 7n 7 r i SB© A P 7u 7 



3 

a p<Dmm • • mm • bibse*^ a p km-t**^ 

U-S'ayfcfTSIKfcttx MAPtoyn77--Y;l/i:, g 
gB<DtulBAP^ , D7r-i';l/^#Bib, ^AP7n7r 

APrc^r^/bBfctt, IS2<DAP^ mm2<0A 

pvimzrcte. x-^or^-tx^wrLTv^ 

mZ%l<DAPfrZwi3M2<DAP'\<DU.WZ2<D 

*%-?%m#.msmm(DA pwm • is^xfAo 
m&*- \£xmo¥mfflfim& ltc a p ? 7 jn,* 

•fZCtlZk-oT, m^l(DAPfrZWIS%2<DAP 
^<Dmm2(DAP<D®m%rcli. x-^^tDT^-feXSiJ 

mzsts, m.A p<omti -mn-wsf- wmvmcfto 

«> 9fBK©APWa-Mffl->Xxi,o 
GfsftS 1 1 ] Huf2fOT^i£B«, 

WE»fTiasii3WEa Ltc a p fa 7 7 jfritms.-? % 
mmAP#viszm^?, Hui2AP7 p D7 7'r;i/^Hif 

?%£tlc&-oT, tulB^l<OAP^5BUi2^2<7)AP 

»«rty, ^a p<omm -mn-mm- ftmvmcm 

Qie^APWS-Mfflv'Xf-Ao 
Bfc&g 1 2 ] tuf2f Jffl^SBli. 
luf2miOAP(DAP7 , n7r-r;l/At(i > i^iOA 
Ptf. HI 2© A P£>$l&$ fcli, x-^OT^-feX* 
^LT^SCtA^Sffi^^nT^D, 2 <D A P <DA 
pyn77^;l/B{cit ^M52<9AP#, i^2®AP 

W&2<DAP(DAPZfu7 7'<)\'?tm&Z>rclsb<D 

a p#v isttmtirz^mt. 

fflfa-9— trxsm^ss*^ Lfe a p * u ^£®#-r 

imiAPXVisZm^T. Buf2fl2tDAP(DAP7n7 
7-f/l/B&tfigB<DAP7D77'-r;l/£ > ^3?2<DA 
Pt>\ %2(DAP<Dmmt;tctt. •r-^'MOT^-trX* 
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1 OA P*^huIB^2<DA Ps\(0m3S2<DA P<D 

•rzm&mzrciz, 9K«©a pes -afflux 

Ao 

•?z>rctf><DAP#vi/*mw?5^mt. 
10 »jHH%ieir-r*¥ai:*#rs»«^8Sfctt, 912 

f©A P^S • iffli/Xfi. 

rat*« 1 4 ] ammmmmwz, 1 c k*## 

U#>/<gBi:f SS!:&»87Ii3l 1 3fB^©A PWS • 

set. ^fiMgBfcfSfr-rsfgtrtSB^ mm 
mmmic77v*r-is3y axr, ap^e-t) 
+&v-\zxmm&mt. my— vxmmmm. m 

iiuf2fOT#3lEB#A POteSfl • Hff • H8r • fJRfrOlgfc: 
Ej$LfcAP7n77^/lA£m£U SffiBBIflmtKc 

im^T'D-fex^w-f s c tttftmttz a p^m • 

30 16] 7/Ut—>3 >*^RHg*f Jffl^ 

SBt, Kf<Jffl#Sfi^%fT-rs^fT#^Bi:s ^fJffl 

^■Kzyu^r- ^3> («t, APtiB-r) zmm 
fzv-vximmmt. m-v—zxmm&m. m 

^^^S^X-rAtcfe^T, APOgS-Sffl^rff^ 
Kfflffl«BtHli:««*n* A PfrS • iffiya^AT* 

£fcti, ^^O^n^ncDAPfCO^T, 
SHB-9— exffi«#SB*^tuE A P 7o 7 r>T 

40 mLx. tmtzfv-tzt, 

%mLfcm&A P~?xi-7 7'()\>frt>W&W<DA P7n7 

7-r;i/^fig-r57'D-bx fc. 

A POiS^ • Hfr • Mi&r • WmZStSAPlcttTZ*'*. 

>3>£fT9^(Cli, lAP©yD77^1/^ g 

SB<0MEAP7'n7r'(';l/^#MU !APya7r 

ttzAPmm • wmfaf^hzmtiLrcmmmWo 

[ff3RJgl7] Sl©AP(DAPyD7r^l/AlC 
^lcOAPA^, ^2cDAP©aHl$fc(i, 

50 'NOT^-tx^^LTvscit^ia^^nri^i: 
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.X*fFi5JLT^<5> Sfctt, HifcLTi^&^cttfE^ 
©AP^Oi^OAPOatlSfcfcfc, T—$"\(DT? 

P7°P7 7 << frZms.?%tc&b<D a p#y->£«tf#-r3 
7*p-feXt, 10 
l3EAP*US/*ffl^T> miAP~?u77'<j\<*WBi 
f SCtleioT, BuE£Sl£DAPfr£fuEJ?l2©AP 
*\QK)B20>AP0)mB£fct&. -r-^OT^-tXftJ 

mz-sts, mk pvteM • ntf • mm • tmcoigMT? 

u-zs 3 y ^M-r s fu -trx t z w-r %m &m i 
6*fe«, 1 7 mm a pwa • iiyn^7A^M 

L/cEtiJifto 

imxm 1 9 1 mmmfmmtfiWMLfc ap^o7 

7^;l/^^M-r5/c46<DA p*u ^ro#-r^^o-tx 

t. 20 
tfiEAPtf'Ji^fflvvc, Suf2AP^n75"r;l/^M]&f 
•f^C tic <koT> H5ESgl<DAPfr6fuEff§2cDAP 
^©^ZWAPOtitgtfcfi, x-^'vcor^-trXSiJ 

wtztts ^a p<ote$ • hit • wm - mmoy&icfi o 

6*fctt, l 7EKOAPtfSi-affl^ny5A*ttlfi 

LfcEiisw*. 

[f|^2 0] MEISSlOAPOAPT'P^T'Ol/A 
fctt, ^sg 1 <D A P 1j\ coa^S fct±, -r- 

*^©7**X£g;£LT^3£fc#E3EE£nT:i3!K 30 
^2<0AP<0APyn7T'T;l'B{c(i, 
tf. ^S2<0AP<DjiHg$fc«\ f-^f\<D7^-t!X^ 
gltLTt^CirtfEiSStlT^-S, feL<(i. fFRTL 

SuEis 2 o a p ©«m#r*fe5 tuE-9— ex&(K#&B 
(c, ^2©APOAPyo7r-<;l/^M-rs/c46o 
A p *y ^g*-r 5 y p-feX i:, 

we*- trx«ft#gg#Ei£ Lfe a p * u s^roi-r 

S^P-feXi:, 

tuEAP^U^fflV^T, Bul2^2CDAP(DAP7'n7 40 
7^;l/BRtfeSg(0APyP75"C;l/^ ^3!2<DA 
Pff, ^2CDAP©^SI$fc(i, x-^OT'^-feX* 
ftffit Z «fc 3 tcMSr-T £ 7°P-trX 
iSEgl 1 OA PA>e>HUlBSi2cDA P'\(OiS2<0A P<D 
Sffitfctt, x-^'MDT^-feXSrafRT-f-ST'a-bXi: 

*w-r -an*® 1 6 1 7fE3S<o a psa • affl 

[ffl!sfc3i 2 l ] tuE*- exg«#gBfr 5>iuE A P 

<DG$hmm*mmtzrctb(DA p#y s/*«s-r«yp 

-fexi:, 50 
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HuEAPtfimcg-^-c, MI2APya77'-r;KDW 
ti> l 7EKOAP»l-afflrD^5A*tt«LfeE 
[ffi&g 2 2] T7V >r-is a >*««HriBa I C * 

-Ft, ki cfi-vz%fi?z%fimmwn. nc 

*-FtcT^yy-i/3> (WT, AP^Ef) 

trx^^SHi:, ex3s«#gB, ^ 
58ff#S«fttfiS I C *- F k*»«tr* I C *- F* 
**^ft-5->X-rAfc^v>T, APOga- Sffl^fr? 
KI C*-Ffc«««n*APWl-3WB^D^AT? 

ttM& tttt^o^-n^twoAPfcov^r, 

ME*- tTXS#l#^S*^ ME A P^P7 7^*« 
®f# LfcMEA P ya7 r-f /!/*»& SUB© A P 7p? 

r -frt^matrs ^p-tx 

A P€felft • Hff • JBK • 9J»*^tyA Pfc*tf 3*^ 

SslK)WEAPyn7r-r/V'€#!!aU ^AP7°n7r 
-<;M)ESElcao Tff5 T/p-feXi; ^^-T 5 c 
fc-TS A PSS • jlffi^a^A*««<lbfeE*«». 
[W*«2 3] SlOAP<DAP^ , P77'-Y;l'AfC 

^20AP(DAP7 P P77''l'/l/B{C(i > ^2<D 
APtf, ^2(OAP©a^*rc(is f-^W^t 

X^SFRltTt>5, *fct±, m±Lx^tk^ntmsM 
*nTvav^*frfc©*, WEtBl-<0AP^6l(IE«2 
OAP'\OM^2(0APOtSBg$rc(i. f-^^<07^ 

■bx^Ri^s7*p-bx*wr «n3m2 2i2«oap 
ga • affl7p^A£te$L;rcEHJg#o 

[000 1] 

BBH<Oii-r*aflS»IP] TZfVr- fa* 

ma • sfflTJffiaif wrUkxTrrv a >ga 

•afflyp^vA^^LfcEtt^c^O, ftfc, * 

^ *-f#, mi-mmj&zvisttzrctb*. ap 
iaoa»*«af *fci6»«: a poitsm^xrc^^ 
fcfc^r, *-exffi«#*v APtH-r^ftfii^^ 

• Htf • »J^*#^ I C Ffcfc*. I C FjtV* 

nicfEoTAP$sa-mr3 1 c*— kic«w-*^ 
i&APfi- affl^afc4607'7°u^— >a ymm 

• Mffl73j£s^>xxARt;T7u^— >3 >wa • a 

[00 0 2] 

CU6*©ttfB] t^O I C*- Fi/X^AT*tt, I C* 
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SflmftAPtttttt^ APf«1«lfcl/C*HLT* 

[0 0 0 3] Sfe, APf«*«©ia«*fTo't^ft 
^ *©fc«K AP©WSM^ A P WHO A P ^7 

[0004] Sfc, cnfeAPUHlCJI^T, *©A 

[^A^b«t^t^3i®] t©fc«>. ±Be<£*© 

A ptf«IWe»^< W*^* 1 ** * c ^ iT ** fj: 
V^ *©fc«>, A PH©7 

ckittsto^ AP©*rtwnRo«e*^ a 
p fcttffliK: a ?ttmm*%5&* c titHZ*^* 
^offlMft&Zo „ . , 

[0006] tit. k?m<omm*mtTtt** 
[0007] *m&* mv^mfrKWcW 20 

T* -9— exttftlWAPCWfc^r-r AP 
yn7 r W;V%ff«U I C *- KJciJWr* t fcfc * 
oT. IC*-F**AP©AP^07TW>I/««»1' 
fc ^l t i(0AP^n77'l'^ ; S:ilF^L^ *nfcf££fctt 

a p©wa • m&ft? z tmmrfv 

[0 0 0 8] $fc E*S*fBB©B««* 

AP7n77-OV*ie&r-f5£i^ 30 

fr« • WUHWA P#U S/*H*r**l*** 
it^cfctc^D, AP^o7r>r>M«aS««««eti 
st*w»«*ofc7yu fr-s/a >*a • aw*»R 

[0010] amn 7/u^ 3 y 40 

APtEt) attt-rstf-e^itfts**^ 
mzm%m®*frt>*^7.7-uci3^r. ap 

^gg . WQZfio A P«S • Sffl*Slc^>T. v- 
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MP, «Hfii& «S«tO«l«WAP 

r ^;^P>e»«©AP^n77^;V^fiKt (Xrv 
74) A P©*» • £ff " £§i • fid»*^»A PK» 
•T^WS/ayJtfi^WCHU SAP©7*n77.f 

egS©AP7*n7r-r;V*#^^ (Xx-y7 
5) * ^AP7 , D7r^;v©i2^^^" r ^^ (X7 " ,y 

™o"i 1] *HW 0WW2) ti> ««g"**V 

X JBlOAPOAP^O^T'T/l/AlCtt, WBIOA 
P«« I2(0APOii*fc(i> ^-*^©7*-feX* 
saiLTVV5CfcjWBS*n-ttBD, !&2©AP©AP 
7o77^VB^ IWZOAPff, 1£!&2©AP© 
IBBiSfctt. x-*^©7**X*tW^Ji; Sfc 

[0Y1 2] *5SH (WW3) tt, «ffl«W^ 

mtrzrcvxoh p#>j ***»u a p#«j ^*«v> 

T AP7'n7r-i';^Mii-rsiii:t<toT, mi© 
APft»6»2©AP'N©IBB2©AP©«t*fctt- £ 
_*^©7»-fc**W**^ KAP©««-«ff ** 

[0 0 13] *»B 0BWW4) tt, mm T^tl 

fe*©AP*US/*«PJU AP#U5/*fflO^ AP 

7D7r^;V^Sif^-^ l:: ' t ^^ mi ^ A I* % ^ 

^2©AP^©^2©AP©«^*^ 

T^xmzis^ KA P©«« »»■ 
[0014] awtas) mmmwi^ 

(DAP©AP7'n7r^At(i, ^ 1(DA P^, ! 
2©AP©«B*fc^ ^^WtB^t 

^ck«a*nT*o, ^ 2<DAPCDAP ^ 

fcAP#yS/*W»U AP*U^*ffl^-C, ^2©A 
P CO A P 7"a 7 7 W ;VBRtf i^S© A P 7*a 7 7 -f^ 
* RSB2©AP^ »2©AP©«**fctt- r A * 

fi2©AP^©KSi2©AP©lM6*fc«- r-^^© 
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[ooi5] *m ««6) «J!2SS^ 
[0016] OWW7) mmmmz. i 

[0 0 1 7] 02tt. *fgfl<DSa«lSBT?* s - 
[0 0 18] 0«««8) «^^ltnn ,0 

«ttWIBWUi««5 0 0i: JWgJJsoo 10 
«wr*«B«Hii ook, 

o, «BWf#wiooRtnwra*iM5oofc** 

mmZOOlt. 3pJffl««B5 0 0*«APOtt»-* 

MNHM5 o oicatrsWr^iWi 
2Z0rt*U flffl«S@5 0 0li. ffWS. 

*»Bfr&AP7n77-frt>«W§l/^ WT*7n 
77^;^S5 i ok. BtfibfcAP Wr^fJ 

*fiM5 2 0k, APOtt»-»T on 
^APT^r^V^f^ft^^^^ 530 

^OoTt] *5»» 0WW9) «ffl««*5 00 
tcfcv>t\ ^KDAPOAP7n7r^;VAlCli, ®B 

OAP©AP7-a77^VBttt, KS2©AP*J, S 

v****. ^ AP *^ 20A ^Ki2 

AP<D«f£$fcti, ^j^r********^* 
It 020] ami o) it. fjffljsss o 

^a7rW;V*aaetSfe«>OAP*y 5/ * Bl# t*J 

gfc AP#'J*>*ffl^ AP^77^M^t 
SCtlC^T. SlOAPfr&lBZOA^^©*** 
OAPOMKfctt. ^-f^T^-tXWItTO^ 

KAPOtSKi-^fT-BR-ffll^B^*^^ 50 
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[0021] *m ami i) *ra*»5o 
o t*^t\ mmm 1 o o wesbfe a p w r 
>r /i/^sH-rsfe*® a p#u fww*^ u * 

P#US/*ffl^T. AP7*n77'OV*M* , *"* c * k - 
ioT »1OAP»6JI2OAPa<0IW2OAPO 

[0022] «SH 0B#S1 2) *^f® 5 ° 
OC^T, Sl©AP©AP7P7r<OVAfctt. « 

fcPOAP7a7r^BCtt, K»2©AP^ 

^«otr«ft«w) a p *u 
-ex^#s®*«bfc a p#«j v**#r 

AP*'JS/*fflV>T, Sg2©AP©AP7a77f 
^Wi»500OAP^7T^IWZO 

©AP^©RSB2©AP©Wi£fctt* x-^T^ 
[0 0 2 3] *is® am 1 3) * ° 

ami 4) «^ S5 ° 

A POMS • «f • M* • " ,w *?E£SS a 
y^9^cff^*WcHLTE^LfcAP7n7 

* o o 2 6i tan am 1 6) ^ZZlllll 
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l-££mm. mmmmmmmmmt 
k? <om- m*ft?mm%mf® *n* ap 

llwttfn*^ h ™ m '*%fVm 10 

BU KAP^T-OV©*^*^^** 

Bttt, WB20APA ^^.DAP^Jfctt 

[0 0 2 8] OWW 1 8) 

? fu77^)^mt^CtK^r. mi©AP* 

WO 2 91 *5W (■*« 1 9) 

St****** AP * y ^T;^2% 

AP^B3B2©AP©«ft*^ r ""^^ r ^ 
X«Sl KAP^-*^^f^ 

[0 0 3 01 «|M «*W2 0) tt, « >©J;POA 

i*Lfc A P «U **™**^**^£V£l£> 

m*Z. »2©AP©APyn7r^BRtfS»«o 
r P 5ta7r^«»2«AP^»20APO« 50 
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«■»& A P C«W««W*ftlM) A P *U ✓* 
7 r-<^^^Sii^57a-bX^-r5o 
[0 0 3 21 M**2 2) ^JZ^I 

*-ex««*t* «3WHSH»t>* C 

!^7rk @g S <DAP7a7 :: f;vj# 
JHU KAP7'n7r^^l^^-^^ D - feX 
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CONTROL AND OPERATION PROGRAM STORED 




(57)Abstract 

PROBLEM TO BE SOLVED: To provide an 
application controlling and operating method by 
which dynamic AP control and operation can be 
performed. 

SOLUTION: A service provider device prepares 
an AP profile in which information necessary for 
performing an operation to be performed by a 



fuser device at the time of performing the 
,rage, execution, update, and erasure of an 
», a condition for performing the operation, or 



tt®^M**A^ procedure to be executed at the time of 
r^itrfperforming the operation is described, and 
I '^f "transmits the AP profile to the user ternnnal. 
* The user terminal obtains the AP profile related 

. . x> Q „ A P to be stored from the service provider device, and 



i 



.• to the AP including the storage, execution, update, and erasure 
^^rTtnt^lof^APpeoMehy^.otheAPp.onlehnd 

of the AP according to the aescnpuu 

the AP profile of its own device. 




CLAIMS 



KMtnlsll twMch can store appUca.ion, and the publisher equ.pment 

Khun. 1] The user equ.pmen.wh.ch can « PP ota „ser equipment 

wbic h puhushes this user equ.pn.ent. In the sys*m ^ 
textual which connects to this user ^ ^J^ ^ provid er equipment 
offers application (it is hereafter desenbed as Aft an „ t ; employmen t 

this puhhsherequipntentand this user eq„q,».nUnth^ AP_ 

^ipment Information requued about the operaUo P fc 
e^ptuent is storing, activation, updatmg, and delefon of 1* 

described about the procedure whtch equipment / storing 1 Or 

performed, transmit to said user eqmpment. ^ — each AP o, a 

^d AP ptoule is acquired from ^ ^ AP pcnle of 

storing schedule. In c»se oper.Uon > 

sen-equipmenttomsatdacqjed^^ ^ approach 

[CUdm 2] In said user equipment thts « * ^ ^ 2 „ d to the AP 

action of the 2nd AP Demanding access to da* - desc manag ement / 

profil e B of said 2nd AP Or the funcrion . „ tbe ^ or da. 

eq uipment described in said user equipment, and «^ e 7i» J ^ of steing , 
^ p„ush Claun 1 which changes the operatmn performed ^ ^ 

J^^^-^^fl"^* AP management / 
to said 2nd AP, er the access control to data of tins AP, 

employment approach given in two. 



2 



.ctiv.aon.npd.tmg, and deletonn^ndu* man agement / 
'„ said 2nd AP, or the access control to data of thts AP. 

employment approach given in two A rf ^ ^ ^ ^ 

(Claim 51 In said nser equipment Una 1st AP ^ ^ ^ ^ ^ 

action of the 2nd AP Demanding acce* . » * ^ „ 
profifo B of this 2nd AP Or the firncrion - ^ derf , eJ , to said service 

date is described. Whenhavmg granted the pernu ^ tf 

provider equipment which is the preheard - AP » ^ ^ ^ 

profile of this 2nd AP » reqmred. A ^ mM J * the profile B of aaid 

equipB ent descrihed, and said AP poheh . Or the AP 

2 nd AP. and AP profile of segment ta* ^ ^ ^ „ 

employment approach given in two. nnroach according to claim 1 to 6 which 

uses said user equipment as the Tampa p d he pubUs her equipment 

.Calmsme nser equlpme nt ^ equipment which provides 

„hich publishes this naer describe d as AP), Consist of a nser 

t hia user cement with apphe.t.o«to he« ^ ^ 

^ntent terminal wh,eh eonnecti thu ^ ^ ^ 

equipment, and this nser equipment ™ * ^ Said provider 

i^- which performs "'^^CZ^ ta *" 

equipment Information required about / ^ toMSe this operation is 

performed, the condiriona which perform P nprf( , rmed to cas e this operation .s 
descrrbed about the pr~.dure whrch should b permed ^ ment 
performed, have a means to transmit to " ^'provi.er equipment about 
'J^ Lre^rrr nnd a means to area. AP profile of 



self-equipment from said acquired AP profile, AP management and the operations 
system characterized by having the means performed according to description of this AP 
profile with reference to the profile of this AP, and said AP profile of self-equipment in 
case operation to AP including storing, activation, updating, and deletion of AP is 
performed. 

[Claim 9] To the AP profile A of the 1st AP, this 1st AP said user equipment The function 
of the 2nd AP When demanding access to data is described, this 2nd AP to the AP profile 
B of this 2nd AP Or the function of this 2nd AP Or AP management and the operations 
system according to claim 8 which has a means to permit access to the function or data 
of this 2nd AP from said 1st AP to said 2nd AP only when having permitted access to 
data or having not forbidden it is not described. 

[Claim 10] Said user equipment a means to acquire AP polish for changing AP profile 
which said service provider equipment described, and by updating said AP profile using 
said AP polish Claim 8 which has a means to change the operation performed in the 
case of storing, activation, updating, and deletion including the function of this 2nd AP 
from said 1st AP to said 2nd AP, or the access control to data of this AP, or AP 
management and an operations system given in nine. 

[Claim 11] Said user equipment a means to acquire AP polish for changing AP profile 
which said publisher equipment described, and by updating said AP profile using said 
AP polish Claim 8 which has a means to change the operation performed in the case of 
storing, activation, updating, and deletion including the function of this 2nd AP from 
said 1st AP to said 2nd AP, or the access control to data of this AP, or AP management 
and an operations system given in nine. 

[Claim 12] To the AP profile A of said 1st AP, this 1st AP said user equipment The 
function of the 2nd AP Demanding access to data is described. This 2nd AP to the AP 
profile B of this 2nd AP Or the function of this 2nd AP Or having forbidden access to 
data is described. A means to require AP polish for changing AP profile of this 2nd AP 
into said service provider equipment which is the provider of said 2nd AP when having 
granted the permission is not described, A means to acquire AP polish which said 
service provider equipment described, and said AP polish are used. This 2nd AP the AP 
profile B of said 2nd AP, and AP profile of self-equipment The function of the 2nd AP Or 
claim 8 which has a means to update so that access to data may be permitted, and a 
means to permit the function of this 2nd AP from said 1st AP to said 2nd AP, or access to 
data, or AP management and an operations system given in nine. 

[Claim 13] Said user equipment is claim 8 which has a means to acquire AP polish for 
updating the expiration date of said AP from said service provider equipment, and a 
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*■ A.*» of said AP profile based on said AP polish, or AP 
means to update the expiration date of said AT pro 

management and an operations system given in nine. 

[Claim 141 AP management and the operations system according to claim 

lOlaimiu n%, mnft n»roofeauipment containing an IC card. 

uses said user equipment as the Tampa proof equip pubUs her 

lcwm »i use, - titsr^rii^.u^ 

equipment terminal wluch connects to this user e, P 

provider equipment, this publisher equip provider 

m .nt and the administration program earned in this service p 
management and tne aom ,„„_„, „f AP Information required 

equipment that performs management and employment £ AP 

about the operation performed in case said user rT^^Z*-*** 
npdating, and deletion of AP, in ease this ^ment and the 

perform this operation, Or the storage ^ *-d*P^ ^ 
administration program characterised by havmg the process win 
described about the procedure which should be performed m case ope 
performed, and is transmitted to said user equipment. 

IClaim « The user equipment which ~ ~j£^£JL'.. . nser 

^*^-^^^^J7^1*t^ the service provider 
equipment terminal winch connects to this user q P 

equipment which offers apphcation (it is „ , are 

provider equipment, this pubhsher equipment and this user e J 
AP management and the administration program carried m ~ ^ 
performs management and employment of AP. and , ^ 
eequired from said service provider equipment about ^ 
process to store and the precesa ^^^^ updating, and 

deletion of AP is performed The storage > w m 
administration program characterised by havmg the ' »»—* 
description of this AP profile with reference to the profile of this AP, and sal 

ofself-equipment. of the 1st AP The function of the 2nd AP 

(Claim 17) This 1st AP in the AP profile A of the tat AP 

When demanding access to dato is described, this 2nd AP to the At £«h B 

AP Or the function of this 2nd AP Or have perm, ted ^ 

which stored AP management and the administration P^-™ -*-f 

which has the process to which the function of this 2nd AP from said 
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AP or access to data is permitted only when having not forbidden is not described. 
[Claim 18] The process which acquires AP polish for changing AP profile which said 
service provider equipment described, and by updating said AP profile using said AP 
polish The function of this 2nd AP from said 1st AP to said 2nd AP Or claim 16 which 
has the process which changes the operation performed in the case of storing, activation, 
updating, and deletion including the access control to data of this AP or the storage 
which stored AP management and an administration program given in 17. 
[Claim 19] The process which acquires AP polish for changing AP profile which said 
publisher equipment described, and by updating said AP profile using said AP polish 
The function of this 2nd AP from said 1st AP to said 2nd AP Or claim 16 which has the 
process which changes the operation performed in the case of storing, activation, 
updating, and deletion including the access control to data of this AP or the storage 
which stored AP management and an administration program given in 17. 
[Claim 20] This 1st AP in the AP profile A of said 1st AP The function of the 2nd AP 
Demanding access to data is described. This 2nd AP to the AP profile B of this 2nd AP 
Or the function of this 2nd AP Or having forbidden access to data is described. The 
process which requires AP polish for changing AP profile of this 2nd AP into said service 
provider equipment which is the provider of said 2nd AP when having granted the 
permission is not described, The process which acquires AP polish which said service 
provider equipment described, Said AP polish is used. This 2nd AP the AP profile B of 
said 2nd AP, and AP profile of self-equipment The function of the 2nd AP Or the function 
of this 2nd AP from said 1st AP to the process updated so that access to data may be 
permitted, and said 2nd AP Or claim 16 which has the process to which access to data is 
permitted or the storage which stored AP management and an administration program 

given in 17. _ 
[Claim 21] Claim 16 which has the process which acquires AP polish for updating the 
expiration date of said AP from said service provider equipment, and the process which 
updates the expiration date of said AP profile based on said AP polish, or the storage 
which stored AP management and an administration program given in 17. 
[Claim 22] The IC card which can store application, and the publisher equipment which 
publishes this IC card, In the system which consists of an IC card terminal which 
connects to this IC card the service provider equipment which offers application (it is 
hereafter described as AP), this service provider equipment and this pubhsher 
equipment, and this IC card Finishing [ are AP management and the administration 
program carried in this IC card that performs management and employment of AP, and 
/ storing ] Or said AP profile is acquired from said service provider equipment about 
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each AP of a storing schedule. The process to store and the process which creates AP 
profile of self-equipment from said acquired AP profile, In case operation to AP 
including storing, activation, updating, and deletion of AP is performed The storage 
which stored AP management and the administration program characterized by having 
the process performed according to description of this AP profile with reference to the 
profile of this AP, and said AP profile of self-equipment. 

[Claim 23] This 1st AP in the AP profile A of the 1st AP The function of the 2nd AP 
When demanding access to data is described, this 2nd AP to the AP profile B of this 2nd 
AP Or the function of this 2nd AP Or have permitted access to data. Or the storage 
which stored AP management and the administration program according to claim 22 
which has the process to which the function of this 2nd AP from said 1st AP to said 2nd 
AP or access to data is permitted only when having not forbidden is not described. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to the storage which stored the 
application management / employment approach, the system, and application 
management and an administration program. The case where a service provider wants 
to volunteer to a card especially by carrying out the storing / activation approach of 
application Gt is hereafter described as AP), [ in order to manage cooperation between 
AP, when you want to refer to the information on AP in order that a card may determine 
the storing / activation approach ] A service provider tells the specification and storing 
and activation / deletion conditions about AP to an IC card. It is related with the storage 
which stored the application management / employment approach for performing 
various AP management and employment in the IC card with which an IC card follows 
it, and manages and employs AP, the system, and application management and an 
administration program. 
[0002] 

[Description of the Prior Art] In the conventional IC card system, the IC card stores the 
information about discernment and the memory occupation of AP, activation limits, etc., 
such as an identification number of stored AP, size, and an expiration date, as AP 
attached information at the time of AP storing, and is not clearly separated with AP. 
[0003] Moreover, renewal of AP attached information is omitted. Therefore, neither the 
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expiration date of AP nor the access privilege whether AP can access to other AP nor the 

description in connection with the access approach can be added later. 

[0004] Moreover, based on these AP information, management and activation of a 

proper are not performed to the AP. 

[0005] 

[ProblemCs) to be Solved by the Invention] For this reason, in the above-mentioned Prior 
art AP attached information is not managed independently and management based on 
AP attached information cannot be performed dynamically. Therefore, access-control 
management between AP cannot be performed dynamically. Moreover, there is a 
problem that AP attached information cannot be changed independently of 
[ modification of the expiration date of AP etc. 1 AP. 

[0006] Moreover, there is a problem that it cannot be specified as cards, such as a 
management method, the activation approach, etc. of AP proper. 

[0007] By having been made in view of the above-mentioned point, creating AP profile 
whose service provider is the configuration file of AP, and transmitting to an IC card, 
this invention creates AP profile of the card with which the IC card unified AP profile of 
each AP, and aims at offering the storage which stored the application management / 
employment approach which can perform management and employment of dynamic AP 
according to it, the system, and application management and an administration 
program. 

[0008] Moreover, a service provider is updating AP profile and the purpose of the further 
this invention is offering the storage which stored the application management / 
employment approach with the framework which can change AP profile actively, the 
system, and application management and an administration program by establishing 
how the AP control approach of a card is made adjustable, and a card, and other card 
publishers and service providers require AP polish. 
[0009] 

[Means for Solving the Problem] Drawing 1 is drawing for explaining the principle ot 
this invention. 

[0010] The user equipment with which this invention (claim l) can store application, 
The publisher equipment which publishes this user equipment, and the service provider 
equipment which provides this user equipment with application (it is hereafter 
described as AP), In the system which consists of a user equipment terminal which 
connects this service provider equipment, this publisher equipment, and this user 
equipment In the AP management / employment approach of performing management 
and employment of AP with service provider equipment Information required about the 
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operation performed in case user equipment is storing, activation, updating, and 
deletion of AP, in case this operation is performed, the conditions which perform this 
operation, AP profile described about the procedure which should be performed in case 
this operation is performed is created (step l), and it transmits to user equipment (step 
2). Or user equipment AP profile is acquired from service provider equipment about 
each AP of a storing settled or a storing schedule. In case operation to AP which stores 
(step 3), creates AP profile of self-equipment from acquired AP profile (step 4), and 
includes storing, activation, updating, and deletion of AP is performed, the profile of this 
AP, With reference to AP profile of self-equipment (step 5), it carries out according to 
description of this AP profile (step 6). 

[0011] This invention (claim 2) is set to user equipment. This 1st AP to the AP profile A 
of the 1st AP The function of the 2nd AP Demanding access to data is described. This 
2nd AP to the AP profile B of the 2nd AP Or the function of this 2nd AP Or only when 
having permitted access to data or having not forbidden it is not described, the function 
of this 2nd AP from the 1st AP to the 2nd AP or access to data is permitted. 
[0012] This invention (claim 3) changes the operation performed in the case of storing, 
activation, updating, and deletion including the function of this 2nd AP from the 1st AP 
to the 2nd AP, or the access control to data of this AP in user equipment by acquiring AP 
polish for changing AP profile which service provider equipment described, and 
updating AP profile using AP polish. 

[0013] This invention (claim 4) changes the operation performed in the case of storing, 
activation, updating, and deletion including the function of this 2nd AP from the 1st AP 
to the 2nd AP, or the access control to data of this AP in user equipment by acquiring AP 
polish for changing AP profile which publisher equipment described, and updating AP 
profile using AP polish. 

[0014] This invention (claim 5) sets this invention (claim 5) to user equipment in user 
equipment. This 1st AP to the AP profile A of the 1st AP The function of the 2nd AP 
Demanding access to data is described. This 2nd AP to the AP profile B of this 2nd AP 
Or the function of this 2nd AP Or having forbidden access to data is described. When 
having granted the permission is not described, to the service provider equipment which 
is the provider of the 2nd AP AP polish for changing AP profile of this 2nd AP is required. 
Acquire AP polish which service provider equipment described, and AP polish is used. It 
updates so that this 2nd AP may permit the function of the 2nd AP, or access to data for 
the AP profile B of the 2nd AP, and AP profile of self-equipment, and the function of this 
2nd AP from the 1st AP to the 2nd AP or access to data is permitted. 
[0015] In user equipment, this invention (claim 6) acquires AP polish for updating the 
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expiration date of AP from service provider equipment, and updates the expiration date 
of AP profile based on AP polish. 

[0016] This invention (claim 7) uses user equipment as the Tampa-proof equipment 
containing an IC card. 

[0017] Drawing 2 is the principle block diagram of this invention. 

[0018] The user equipment 500 with which this invention (claim 8) can store application, 
The publisher equipment 100 which publishes this user equipment 500, and the service 
provider equipment 200 which provides this user equipment 500 with application (it is 
hereafter described as AP), Consist of a user equipment terminal 400 which connects 
this service provider equipment 200, this publisher equipment 100, and this user 
equipment 500. They are AP management and the operations system which performs 
management and employment of AP. Service provider equipment 200 Information 
required about the operation performed in case user equipment 500 is storing, 
activation, updating, and deletion of AP, in case this operation is performed, the 
conditions which perform this operation, Or an AP profile creation means 210 to create 
AP profile described about the procedure which should be performed in case this 
operation is performed, Finishing [ have a profile transmitting means 220 to transmit 
AP profile to user equipment 500, and / user equipment 500 / storing ] Or AP profile is 
acquired from service provider equipment about each AP of a storing schedule. Aprofile 
storing means 510 to store, and a profile generation means 520 to generate AP profile of 
self-equipment from acquired AP profile, In case operation to AP including storing, 
activation, updating, and deletion of AP is performed, with reference to the profile of 
this AP, and AP profile of self-equipment, it has the updating means 530 performed 
according to description of this AP profile. 

[0019] This invention (claim 9) is set to user equipment 500. This 1st AP to the AP 
profile A of the 1st AP The function of the 2nd AP When demanding access to data is 
described, this 2nd AP to the AP profile B of this 2nd AP Or the function of this 2nd AP 
Or only when having permitted access to data or having not forbidden it is not described, 
it has a means to permit the function of this 2nd AP from the 1st AP to the 2nd AP, or 
access to data. 

[0020] A means to acquire AP polish for this invention (claim 10) to change AP profile 
which service provider equipment 200 described in user equipment 500, It has a means 
to change the operation performed in the case of storing, activation, updating, and 
deletion including the function of this 2nd AP from the 1st AP to the 2nd AP, or the 
access control to data of this AP, by updating AP profile using AP polish. 
[0021] This invention (claim 11) a means to acquire AP polish for changing AP profile 
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connects this service provider equipment, this publisher equipment, and this user 
equipment Finishing [ are AP management and the administration program carried in 
this user equipment that performs management and employment of AP, and / storing ] 
Or AP profile is acquired from service provider equipment about each AP of a storing 
schedule. The process to store and the process which creates AP profile of 
self-equipment from acquired AP profile, In case operation to AP including storing, 
activation, updating, and deletion of AP is performed, with reference to the profile of 
this AP, and AP profile of self-equipment, it has the process performed according to 
description of this AP profile. 

[0027] To the AP profile A of the 1st AP, this 1st AP this invention (claim 17) The 
function of the 2nd AP When demanding access to data is described, this 2nd AP to the 
AP profile B of this 2nd AP Or the function of this 2nd AP Or only when having 
permitted access to data or having not forbidden it is not described, it has the process to 
which the function of this 2nd AP from the 1st AP to the 2nd AP or access to data is 
permitted. 

[0028] This invention (claim 18) has the process which changes the operation performed 
in the case of storing, activation, updating, and deletion including the function of this 
2nd AP from the 1st AP to the 2nd AP, or the access control to data of this AP the process 
which acquires AP polish for changing AP profile which service provider equipment 
described, and by updating AP profile using AP polish. 

[0029] This invention (claim 19) has the process which changes the operation performed 
in the case of storing, activation, updating, and deletion including the function of this 
2nd AP from the 1st AP to the 2nd AP, or the access control to data of this AP the process 
which acquires AP polish for changing AP profile which publisher equipment described, 
and by updating AP profile using AP polish. 

[0030] To the AP profile A of the 1st AP, this 1st AP this invention (claim 20) The 
function of the 2nd AP Demanding access to data is described. This 2nd AP to the AP 
profile B of this 2nd AP Or the function of this 2nd AP Or having forbidden access to 
data is described. The process which requires AP polish for changing AP profile of this 
2nd AP into the service provider equipment which is the provider of the 2nd AP when 
having granted the permission is not described, The process which acquires AP polish 
which service provider equipment described, and AP polish are used. This 2nd AP the 
AP profile B of the 2nd AP, and AP profile of self-equipment The function of the 2nd AP 
Or it has the process updated so that access to data may be permitted, and the process 
to which the function of this 2nd AP from the 1st AP to the 2nd AP or access to data is 
permitted. 
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[0031] This invention (claim 21) has the process which acquires AP polish for updating 
the expiration date of AP from service provider equipment, and the process which 
updates the expiration date of AP profile based on AP polish. 

[0032] The IC card with which this invention (claim 22) can store application, The 
publisher equipment which publishes this IC card, and the service provider equipment 
which provides this IC card with application (it is hereafter described as AP), In the 
system which consists of an IC card terminal which connects this service provider 
equipment, this publisher equipment, and this IC card Finishing [ are AP management 
and the administration program carried in this IC card that performs management and 
employment of AP, and / storing ] Or AP profile is acquired from service provider 
equipment about each AP of a storing schedule. The process to store and the process 
which creates AP profile of self-equipment from acquired AP profile, In case operation to 
AP including storing, activation, updating, and deletion of AP is performed, with 
reference to the profile of this AP, and AP profile of self-equipment, it has the process 
performed according to description of this AP profile. 

[0033] To the AP profile A of the 1st AP, this 1st AP this invention (claim 23) The 
function of the 2nd AP When demanding access to data is described, this 2nd AP to the 
AP profile B of this 2nd AP Or the function of this 2nd AP Or only when having 
permitted access to data or having not forbidden it is not described, it has the process to 
which the function of this 2nd AP from the 1st AP to the 2nd AP or access to data is 
permitted. 

[0034] As mentioned above, in this invention, when AP profile information receives a 
demand from the time of AP storing and updating, or user equipment (IC card), it is 
transmitted to an IC card, and an IC card creates AP profile of a card based on AP 
profile of AP, and performs employment and management of AP with reference to it 
according to the description at the time of storing, activation, and deletion of AP. 
Thereby, employment of AP proper is attained. 

[0035] Furthermore, AP profile information becomes possible [ changing only an 
employment plan 1, without changing AP, since it can change independently of AP by 
requiring new AP profile of a service provider. 
[0036] 

[Embodiment of the Invention] Drawing 3 shows the system configuration of this 
invention. 

[0037] The system shown in this drawing consists of card publisher equipment 100, two 
or more service provider equipments 200, a network 300, a user equipment terminal (IC 
card terminal) 400, and user equipment (IC card 400), and card publisher equipment 
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100, service provider equipment 200, and the IC card terminal 400 are connected 
through the network 300. 

[0038] Card publisher equipment (card issue engine) 100 publishes IC card 500 to the 
user of the IC card terminal 400. 

[0039] Service provider equipment 200 creates AP profile which described the 
specification about AP and the conditions about operation to offer. 

[0040] The information indicated by the AP profile concerned has the following, for 
example. 

* Description about the activation limit to the use count and using agency of API 

- Description about the function and data with which AP provides a card and other AP, 
or the function and data to be used; 

- Description; about the protocol at the time of the renewal of AP, activation, and 
deletion etc. is mentioned. 

[0041] The information on the above-mentioned AP profile is transmitted to IC card 500, 
the time of AP storing and updating, or when a demand is received from IC card 500, 
and an IC card creates AP profile of IC card 500 based on AP profile of AP, and performs 
employment and management of AP with reference to it according to the description at 
the time of storing, activation, and deletion of AP. 

[0042] Moreover, the information on AP profile can be changed into service provider 
equipment 200 independently of AP by requiring new AP profile. For example, when 
there is an access request to AP with IC card 500, it is possible by investigating whether 
the accessed side is taking out the access permission to perform an access control 
appropriately. 

[0043] IC card 500 stores the information on AP profile about AP and the AP concerned, 
and creates AP profile of IC card 500 concerned from the information on AP profile of 
these plurality. 

[0044] It sets to IC card 500 concerned, for example, is AP profile of AP~a. - AP~a to a 
The function concerned of AP-b Or demanding access to data is described and it is AP 
profile of AP-b. - AP b to b The function concerned of AP b Or only when having 
permitted access to data or having not forbidden it is described, the function concerned 
of AP-b from AP-a to AP-b or access to data is permitted. 

[0045] The IC card terminal 400 has the interface of IC card 500 and a network 400. 
[0046] 

[Example] Hereafter, the example of this invention is explained with a drawing. 
[0047] Drawing 4 shows the system configuration of one example of this invention. 
[0048] IC card 500 performs the communication link with card publisher equipment 100 
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or service provision equipment 200 through the IC card terminal 400. 

[0049] The publisher who has card publisher equipment 100 is the engine which 

published IC card 500. 

[0050] Service provision equipment 200 performs AP offer to IC card 500. 

[0051] In addition, between card publisher equipment 100 and service provider 

equipment 200, it shall communicate freely through a network 300. 

[0052] Although IC card 500 always communicates through the IC card terminal 400 in 
this drawing, the IC card terminal 400 is omitted in the following drawings for 
simplification of explanation. 

[0053] [1st example] this example explains the example which stores AP profile in an IC 
card. 

[0054] Drawing 5 is drawing for explaining the example which stores AP profile of the 
1st example of this invention in an IC card. In addition, the figure in O in this drawing 
and the figure of the following explanation shall correspond. 

[0055] ** Transmit the load demand of the profile polish of AP a in which IC card 500 
contains the identification information of AP-a through the IC card terminal 400 about 
AP-a after a storing schedule or storing to service provision equipment 200A. 
[0056] ** Service provision equipment 200A creates AP profile-a. AP profile - To a, AP 
identification information, storing size of AP, execution size of AP, The information 
about fundamental specifications of AP, such as the amount of use memory of AP, and 
the execution condition of AP, The information in connection with the employment plan 
of AP, such as deletion conditions, updating conditions, and an expiration date, 
Information required in order that the card money tea (following, CM) which performs 
control in IC card 500 may store, perform, delete and update AP, such as information 
which described relation with other AP, such as Offer AP, a specification AP, etc. of AP, is 
included. 

[0057] ** Service provider equipment 200 transmits AP profile-a to IC card 500. 

[0058] ** CM of IC card 500 stores AP profile-a, and updates AP profile of IC card 500 

based on AP profile-a. 

[0059] Then, in performing activation, updating, and deletion of AP-a, with reference to 
AP profile in IC card 500, management and employment of AP a are performed 
according to the description concerned. 

[2nd example] this example explains the example which stores AP profile in IC card 500 
at the time of AP storing. 

[0060] Drawing 6 is drawing for explaining the example which stores AP profile in an IC 
card at the time of AP storing of the 2nd example of this invention. In addition, the 
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profile of IC card 500 so that AP"b cannot be used. 

[0071] When AP-a is stored in IC card 500, CM investigates AP profile-b of AP-b and 
investigates whether access to the function concerned of AP-b which AP-a uses is 
permitted to AP-a. When the permission is granted, CM updates AP profile of IC card 
500 so that AP-a may be accessible to the function concerned of AP*b. 
[0072] When a permission is not granted, CM updates AP profile of IC card 500 so that 
AP-a cannot access the function concerned of AP-b. 

[0073] [4th example] this example explains the example which performs share AP 
management of card publisher offer at the time of storing and activation by AP profile. 
However, it explains as a thing with AP license. In this example, first, as shown in 
drawing 6 , the load demand of AP~a is transmitted like the 3rd above-mentioned 
example ( drawing 6 **), and AP profile of a card is updated with reference to this 
( drawing 6 **). 

[0074] At this time, CM investigates AP profile-b of AP-b and investigates whether 
access to the function concerned of AP-b which AP-a uses is permitted to AP-a. When 
the permission is granted, CM updates AP profile of IC card 500 so that AP-a may be 
accessible to the function concerned of AP-b. 

[0075] Here, the case where a permission is not granted is explained. 
[0076] Drawing 7 is drawing for explaining the example of the teacher AP management 
at the time of storing and activation by AP profile of the 4th example of this invention 
(AP polish demand by the card). In this drawing, the figure in O and the figure of the 
following explanation shall correspond. 

[0077] ** IC card 500 transmits AP profile-a to service provision equipment 200, as 
shown in drawing 7 . 

[0078] ** Service provider equipment 200B creates the AP policy b as a license which 
gives the licence of the function of AP-b concerned to AP _ a of IC card 500, after verifying 
the justification of a load demand and AP profile-a of AP~a. 
[0079] ** Transmit the created AP policy b to IC card 500. 

[0080] ** CM verifies the justification of the AP policy b and update AP profile-b by the 
AP policy b, and based on AP profile-b, AP-a updates AP profile of IC card 500 so that it 
may be accessible to the function concerned of AP-b. 

[0081] [5th example] this example explains the example of share AP management of AP 
provider equipment offer at the time of storing and activation by AP profile. However, it 
explains as a thing with AP license. 

[0082] AP, a library, or data Gt is hereafter described as AP-b) shall be beforehand 
stored in IC card 500 by service provider equipment A or the card publisher Gt is 
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hereafter described as service provider equipment B). 

[0083] Drawings is drawing for explaining the example of the share AP management at 
the time of storing and activation by AP protocol of the 5th example of this invention 
(AP polish demand by service-provision equipment: when a and AP load are another). In 
addition, the figure in O in this drawing and the figure of the following explanation 
shall correspond. 

[0084] ** Although AP-a in IC card 500 is demanding access to the function concerned of 
AP b at the time of activation etc. at the time of storing of AP a, IC card 500 transmits 
and notifies AP profile-a of AP a to the service provider equipment 200 which is the 
provider of AP-a, when the access permission from APb has not come out. 
[0085] ** Service provider equipment 200A transmits AP profile-a of IC card 
transmission to card publisher equipment 100, and requires the AP policy b of APb. 
[0086] ** Service provider equipment 200B verifies the load demand of AP-a, and the 
justification of AP profile-a. 

[0087] ** And create the AP policy b as a license which gives the licence of the function 
of APb concerned to APa of IC card 500. 

[0088] ** Service provider equipment 200B transmits the AP policy b to IC card 500. 
[0089] ** CM verifies the justification of the AP policy b, by the AP policy b, updates AP 
profileb and updates AP profile of IC card 500 using these profiles. 
[0090] At this time, CM is AP profile. - It is a, it checks demanding access to the function 
concerned of AP b of AP a, and checks that CM has permitted access to the function 
concerned of AP b of AP a by AP profile b, and CM sets up so that AP-a cannot access 
the function concerned of AP'b. 

[6th example] this example explains the example of share AP management of AP 
provider offer at the time of storing and activation by AP profile. However, it explains as 
a thing with AP license. 

[0091] Drawing 9 is drawing for explaining the example at the time of storing and 
activation by the profile of the 6th example of this invention which carries out share AP 
management (in the case of AP polish demand by service provider equipment, and AP 
load coincidence). 

[0092] AP, a library, or data (it is hereafter described as AP-b) shall be beforehand 
stored in IC card 500 by service provider equipment 200 or card publisher equipment 
100 (service provider equipment 200B). 

[0093] ** IC card 500 transmits the load demand of AP-a to service provider equipment 
200A through the IC card terminal 400. 

[0094] ** Service provider equipment 200A creates AP profile-a based on the 
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specification and employment conditions of AP-a. 

[0095] When APa is AP which uses AP-b in IC card 500 at this time, the file 
information or instruction information on AP"b used from the identification information 
and AP-a of AP-b which AP-a uses for AP profile-a is indicated. 

[0096] ** Service provider equipment 200A transmits AP profile-a to service provider 
equipment 200B, and requires the AP policy b of APa as the load demand of AP a 
transmitted from IC card 500. 

[0097] ** Service provider equipment 200B creates the AP policy b as a license which 
gives the licence of the function of AP b concerned to AP a of IC card 500, after verifying 
the justification of a load demand and AP profile-a of AP-a. 

[0098] ** Transmit the created AP policy b to service provider equipment 200A. 

[0099] ** Service provider equipment 200A sends AP-a, AP profile-a, and the AP policy b 

to IC card 500, after verifying the justification of AP profile-b. 

[0100] ** CM of IC card 500 stores AP*a, verifies the justification of the AP profile-a-AP 
policy b, by the AP policy b, updates AP profile-b and updates AP profile of IC card 500 
using these profiles. At this time, CM checks demanding access to the function 
concerned of APb of APa by AP profile-a, and it checks that CM has permitted access to 
the function concerned of APb of APa by AP profile-b, and CM sets up so that APa may 
be accessible to the function concerned of AP*b. When a permission is not granted, CM 
sets up so that AP-a cannot access the function concerned of AP"b. 

[0101] [7th example] this example explains the case where AP polish and AP profile are 
got from two or more AP. 

[0102] In the 6th above-mentioned example two or more AP b, when requiring the 
access privilege to n, AP-a service provider equipment 200 The AP policies b, ~, n are 
required of each of two or more AP"b, service provider 200B that offer service of n, ", 
n. Updating AP profile-a and the AP policies b, -, n in CM, CM updates AP profile of IC 
card 500 based on all the profile of them. 

[0103] [8th example] this example explains the example of the expiration date 
management at the time of activation by AP profile (AP deletion). 

[0104] Drawing 10 is drawing for explaining the expiration date management at the 
time of activation by the profile of the 8th example of this invention. 
[0105] ** The run command of AP a is published by IC card 500 from service provision 
equipment 200A. 

[0106] ** In case AP is performed, CM investigates the execution condition and 
activation pretreatment described by AP profile of a card before activation. 
[0107] ** When the execution condition is fulfilled, perform AP a. 
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[0108] ** When AP-a is completed, CM receives an activation result from AP-a. 

[0109] ** When the terminating condition and activation jaw processing described by 

AP profile are investigated and the terminating condition is fulfilled, end AP-a. 

[0110] ** When expiration date information is described as after [ activation ] after 

treatment in AP profile, CM judges whether the expiration date of AP has come based 

on the activation result received from AP, and, in the case of an expiration date piece, 

sends the deletion instruction of AP at AP-a. 

[0111] AP*a does a deletion activity and returns a deletion result. CM performs it, when 
deletion after treatment occurs with reference to AP profile. For example, it notifies 
having deleted AP-a to service provider equipment 200A. 

[0112] [9th example] this example explains the example which updates AP profile at the 
time of renewal of AP. 

[0113] If IC card [ finishing / storing of AP ] 500 transmits the updating demand of AP-a 
to service provider equipment 200 through the IC card terminal 400, service provider 
equipment 200 will transmit AP polish for updating AP and AP profile for updating to 
IC card 500. 

[0114] CM updates renewal of AP-a, and AP profile-a based on AP polish, and updates 
AP profile of IC card 500. 

[0115] [10th example] this example explains the example which updates AP profile 
(modification of an expiration date). 

[0116] When accompanied by modification of the expiration date of AP [ finishing / 
storing ] in IC card 500, CM requires AP polish which changes the expiration date of AP 
into a service provider. 

[0117] According to a change request, service provider equipment 200 creates AP polish 
of AP, and transmits it to IC card 500 so that the expiration date of AP may be updated. 
[0118] CM is stored in new AP polish, updates AP profile according to AP polish, and 
updates AP profile of IC card 500 based on such information. An old expiration date is 
changed by this at a new expiration date, for example. Moreover, in the 
above-mentioned example, although explained based on the configuration of drawing 3 
and drawing 4 , in case each component in these drawings is built as a program and this 
invention is carried out, this invention can be easily realized by installing in each of 
service provider equipment, card issue equipment, an IC card terminal, and an IC card. 
[0119] In addition, modification and application are variously possible for this invention 
within the limits of an application for patent, without being limited to the 
above-mentioned example. 
[0120] 
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[Effect of the Invention] As mentioned above, according to this invention, the following 
effectiveness is done so. 

[0121] 1. By describing the management / employment approach in case CM stores, 
performs and deletes AP to AP profile, different flexible management and employment 
for every AP are attained. 

[0122] 2. In order to change AP profile, the AP management / employment approach can 
be actively changed by requiring issue of AP polish and changing AP profile based on AP 
polish. 

[0123] 3. Since it is possible to change AP profile independently of AP by issue of AP 
polish, modification of AP management method and the control approach of operation, 
such as expiration date modification, is possible. 

[0124] 4. An access privilege etc. can manage the demand and authorization between AP 
without conflict of CM. Moreover, it is manageable to which instruction and library data 
in that case whether it is accessible. Thereby, data sharing, a library share, etc. are 
attained. 



DESCRIPTION OF DRAWINGS 



[Brief Description of the Drawings] 

[Drawing l] It is drawing for explaining the principle of this invention. 

[Drawing 2] It is the principle block diagram of this invention. 

[Drawing 3] It is the system configuration Fig. of this invention. 

[Drawing 4] It is the system configuration Fig. of one example of this invention. 

[Drawing 5l It is drawing for explaining the example which stores AP profile of the 1st 

example of this invention in an IC card. 

[Drawing 6] It is drawing for explaining the example which stores AP profile in an IC 
card at the time of AP storing of the 2nd example of this invention. 

[Drawing 7] It is drawing for explaining the example of the share AP management at 
the time of storing and activation by AP profile of the 4th example of this invention (AP 
polish demand by the card). 

[Drawing 8] It is drawing for explaining the example of the share AP management at 
the time of storing and activation by AP profile of the 5th example of this invention 
(when AP polish demand / AP load by SP are another). 

[Drawing 91 It is drawing for explaining the example of the share AP management at 
the time of storing and activation by AP profile of the 6th example of this invention (in 
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the case of AP polish demand by SP, and AP load coincidence). 

[Drawing 10] It is drawing for explaining the example of the expiration date 

management at the time of activation by AP profile of the 8th example of this invention. 

[Description of Notations] 

100 Publisher Equipment 

200 Service Provision Equipment 

210 AP Profile Creation Means 

220 Profile Transmitting Means 

300 Network 

400 User Equipment Terminal, IC Card Terminal 
500 User Equipment, IC Card 
510 Profile Storing Means 
520 Profile Generation Means 
530 Updating Means 



* NOTICES * 

JPO and NCIP1 are not responsible for any 
damages caused by the use of this translation. 

l.This document has been translated by computer. So the translation may not reflect 
the original precisely. 

2 **** s hows the word which can not be translated. 
3.1n the drawings, any words are not translated. 
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